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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions of claims in the application. 
Listing of claims: 

1-22 (Cancelled). 

23. (Currently Amended) A data reproduction apparatus decrypting encrypted content data to 
reproduce content data, comprising: 

a data reproduction unit to reproduce said encrypted content data, and 
a data storage unit storing said encrypted content data and an encrypted content key, and 
providing said encrypted content data and said encrypted content key to said data reproduction 
unit, wherein said encrypted content key is a content key directed to decrypt said encrypted 
content data in an encrypted form decryptable with a first decryption key unique to said data 
reproduction unit; 

wherein said data reproduction unit comprises 

a session key generation unit generating a session key updated at every access to obtain 
said content key with respect to said data storage unit, 

a first encryption processing unit encrypting said session key using a public encryption 
key that can be decrypted at said data storage unit and that is unique to said data storage unit, and 
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providing said encrypted session key to said data storage unit, 

a first decryption processing unit using said session key to decrypt said encrypted content 
key that is an encrypted version of said content key using said session key, said encrypted content 
key formally obtained from said data storage unit in an e ncrypt e d form with said s e ssion key , 

a first key hold unit prestoring said first decryption key, 

a second decryption processing unit extracting said content key by applying a decryption 
process on an output from said first decryption processing unit using said first decryption key 
stored in said first key hold unit, and 

a third decryption processing unit receiving said encrypted content data read out from 
said data storage unit to decrypt said encrypted content data using a content key extracted by said 
second decryption processing unit to extract content data. 

24. (Previously Presented) The data reproduction apparatus according to claim 23, said 
content data being coded audio data coded according to a coding scheme to reduce an amount of 
data, 

wherein said data reproduction unit comprises 

an audio decoding unit reproducing audio data based on said coding scheme from said 
coded audio data, and 

a digital-analog converter converting said reproduced audio data into an analog signal. 
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25. (Previously Presented) The data reproduction apparatus according to claim 23 , wherein 
said data reproduction unit is provided in a security region that cannot be read out by a third 
party. 

26. (Previously Presented) The data reproduction apparatus according to claim 23, wherein 
said data storage unit comprises 

a record unit to store data applied to said data storage unit, 

a second key hold unit storing said public encryption key unique to said data storage unit, 
and that can supply said public encryption key to said data reproduction unit, 

a third key hold unit storing a second decryption key used to decrypt data encrypted with 
said public encryption key, 

a fourth decryption processing unit using said second decryption key to decrypt said first 
session key transmitted from said data reproduction unit in an encrypted form by said public 
encryption key, and 

a second encryption processing unit encrypting encrypted content key stored in said 
recording unit using said first session key extracted at said fourth decryption processing unit for 
output. 

27. (Previously Presented) The data reproduction apparatus according to claim 23, wherein 
said data storage unit is detachable with respect to said data reproduction unit. 
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28. (Currently Amended) A data reproduction apparatus decrypting encrypted content data to 
reproduce content data, comprising: 

a data reproduction unit decrypting said encrypted content data using a content key 
directed to decrypt said encrypted content data to reproduce content data, and 

a data storage unit storing said encrypted content data and said content key, and 
encrypting a first session key diff e ring for ev e ry access to obtain said cont e nt key into a form 
dccryptablo by a unique d e cryption k e y with a unique decryption key unique to said data 
reproduction unit for supply to said data reproduction unit, said first session key differing for 
every access to obtain said content key, 

wherein said data reproduction unit comprises 

a first key hold unit prestoring said unique decryption key, 

a first decryption processing unit applying a decryption processing using said unique 
decryption key which is an output from said first key hold unit, 

a first session key generation unit generating a second session key updated for every 
access to obtain said content key with respect to said data storage unit, 

a first encryption processing unit encrypting and applying to said data storage unit said 
second session key using a first session key that is a decrypted version of an encrypted first 
session key using said unique decryption key supplied from said data storage unit, said encrypted 
first session key is an encrypted version of said first session key using said unique decryption key 
at said first decryption processing unit using a first session k e y that is encrypt e d in a form 
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d e cryptable with said uniqu e decryption k e y suppli e d from said data storag e unit and d e crypt e d at 
said first d e cryption processing unit , and 

a second decryption processing unit using said second session key to decrypt an encrypted 
content key, said encrypted content key that is an encrypted version of d e crypting for said s e cond 
s e ssion k e y said content key supplied from said data storage unit using said unique decryption 
key and further using in an e ncrypt e d form decryptable by said uniqu e d e cryption k e y and furth e r 
encrypted with said second session key, 

said first decryption processing unit extracting said content key by applying a further 
decryption process on the output from said second decryption processing unit using said unique 
decryption key, 

wherein said data reproduction unit further comprises a third decryption processing unit 
receiving said encrypted content data supplied from said data storage unit to decrypt said receive 
encrypted content data using a content key extracted by said first decryption processing unit to 
extract content data. 

29. (Previously Presented) The data reproduction apparatus according to claim 28, 

wherein said content data is coded audio data encoded by a coding scheme to reduce an 

amount of data, 

wherein said data reproduction unit further comprises 

an audio decoding unit reproducing audio data based on said coding method from said 
coded audio data, and 
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a digital-analog converter converting said reproduced audio data into an analog signal. 

30. (Previously Presented) The data reproduction apparatus according to claim 29, wherein 
said data reproduction unit has at least said first key hold unit, said first decryption processing 
unit, said second decryption processing unit and said third decryption processing unit provided in 
a security region that cannot be read out by a third party. 

3 1 . (Previously Presented) The data reproduction apparatus according to claim 28, wherein 
said data storage unit comprises 

a recording unit to store data applied to said data storage unit, 

a second session key generation unit generating said first session key, 

a second encryption processing unit applying an encryption process using a public 

encryption key unique to said data reproduction unit and directed to apply encryption that can be 

decrypted with said unique decryption key, 

a fourth decryption processing unit using said first session key to decrypt said second 

session key transmitted from said data reproduction unit in an encrypted form with said first 

session key, and 

a third encryption processing unit carrying out an encryption process by said first session 
key extracted at said fourth decryption processing unit for output, 

said content key stored in said recording unit being encrypted at said second encryption 
processing unit and further encrypted at said third encryption processing unit to be supplied to 
said data reproduction unit. 
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32. (Previously Presented) The data reproduction apparatus according to claim 28, wherein 
said data storage unit is a memory card detachable with respect to said data reproduction unit. 

33. (Previously Presented) The data reproduction apparatus according to claim 31, further 
comprising an authentication data hold unit storing and supplying to said data storage unit 
authentication data unique to said data reproduction unit together with said public encryption key 
in an encrypted form decryptable by an authentication key at said data storage unit, 

wherein said data storage unit comprises 

a fifth decryption processing unit decrypting and extracting said authentication data and 
said public encryption key applied from said data reproduction unit in an encrypted form by said 
authentication key, and 

control means carrying out an authentication process to determine whether to output said 
content key to a data reproduction unit from which said authentication data is output based on 
said authentication data extracted by said fifth decryption processing unit. 

34. (Currently Amended) A data reproduction apparatus decrypting encrypted content data to 
reproduce content data, comprising: 

a data reproduction unit decrypting said encrypted content data using a content key 
directed to decrypt said encrypted content data to reproduce content data, and 

a data storage unit storing said encrypted content data and said content key, and 
encrypting and supplying to said data reproduction unit a first session key with a unique 

Page 8 



Submission under 37 C.F.R. §1.1 14 
Serial No. 10/069,118 
Attorney Docket No. 020234 

decryption key unique to said data reproduction unit, said first session key differing for every 
access to obtain said encrypted content data in an encrypt e d form d e cryptabl e by a uniqu e 
d e cryption key unique to said data r e production unit , 

wherein said data reproduction unit comprises 

a key hold unit prestoring said unique decryption key, 

a first decryption processing unit decrypting using said unique decryption key supplied 
from said data storage unit and said encrypted first session key and extracting said first session 
key for said uniqu e d e cryption k e y said first s e ssion k e y e ncrypted in a form d e cryptabl e with 
said unique d e cryption k e y suppli e d from said data storag e unit for extraction , 

a session key generation unit generating a second session key updated for every access to 
obtain said content key with respect to said data storage unit, 

a first encryption processing unit encrypting and providing to said data storage unit said 
second session key by said first session key, 

a second decryption processing unit using decrypting for said second session key to 
decrypt an encrypted content key, said encrypted content key is an encrypted version of said 
content key using said second session key, said encrypted content key supplied from said data 
storage unit said content data suppli e d from said data storage unit in an encrypt e d form with said 
second s e ssion key , and 

a third decryption processing unit receiving said encrypted content data supplied from 
said data storage unit based on an output of said second decryption processing unit to extract 
content data. 
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35. (Previously Presented) The data reproduction apparatus according to claim 34, further 
comprising an authentication data hold unit storing, in an encrypted form decryptable by an 
authentication key, a public encryption key that is an encryption key unique to said data 
reproduction unit and directed to apply encryption that is decryptable with said unique decryption 
key and authentication data unique to said data reproduction unit, and that can output the stored 
public encryption key and authentication data to said data storage unit. 

36. (Previously Presented) The data reproduction apparatus according to claim 35, wherein 
said data storage unit is detachable with respect to said data reproduction apparatus. 

37. (Previously Presented) The data reproduction apparatus according to claim 34 wherein 
said content key is stored in said recording unit in an encrypted form decryptable with a 
predetermined second decryption key by said data reproduction apparatus, 

wherein said data reproduction unit further comprises a fifth decryption processing unit 
to carry out decryption using a predetermined second decryption key, 

wherein said fifth decryption processing unit receives as a decrypted result for said 
second session key by said second decryption processing unit said content key supplied from said 
data storage unit in an encrypted form decryptable with said second decryption key and further 
encrypted with said second session key, and decrypting said content key for said second 
decryption key to provide the decrypted content key to said third decryption processing unit. 
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38. (Previously Presented) The data reproduction apparatus according to claim 34, wherein 
said data storage unit is detachable with respect to said data reproduction apparatus. 

39. (Previously Presented) The data reproduction apparatus according to claim 34, further 
comprising an interface for connection to a portable telephone network. 

40. (Previously Presented) The data reproduction apparatus according to claim 39, further 
comprising a conversation processing unit to carry out conversation via said interface. 

41 . (Previously Presented) The data reproduction apparatus according to claim 34, wherein 
said data storage unit is a memory card detachable with respect to said data reproduction unit. 

42. (Previously Presented) The data reproduction apparatus according to claim 34, wherein 
said data reproduction unit has at least said key hold unit, said first decryption processing unit, 
said second decryption processing unit and said third decryption processing unit provided in a 
security region that cannot be read out by a third party. 

43. (Previously Presented) The data reproduction apparatus according to claim 34, wherein 
said data storage unit comprises 

a recording unit to store data applied to said data storage unit, 

a second session key generation unit generating said first session key, 
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a second encryption processing unit encrypting said first session key generated at said 
second session key generation unit by a public encryption key unique to said content data 
reproduction unit and directed to apply encryption that can be decrypted with said unique 
decryption key, 

a fourth decryption processing unit to decrypt, using said first session key, said second 
session key transmitted from said data reproduction unit in an encrypted form with said first 
session key, and 

a third encryption processing unit applying an encryption process by said second session 
key extracted at said fourth decryption processing unit for output, 

wherein said content key stored in said recording unit is encrypted at said third encryption 
processing unit and supplied to said data reproduction unit. 

44. (Previously Presented) The data reproduction apparatus according to claim 35, wherein 
said data storage unit comprises 

a recording unit to store data applied to said data storage unit, 
a fourth decryption processing unit decrypting using an authentication key said public 
encryption key and said authentication data that are in an encrypted form decryptable by said 
authentication key to extract said public encryption key and said authentication data, 

a control unit providing control of an authentication process determining whether said 
content key is to be output or not to a data reproduction unit from which said authentication data 
is output based on said authentication data extracted at said fourth decryption processing unit, 

Page 12 



Submission under 37 C.F.R. §1.114 
Serial No. 10/069,118 
Attorney Docket No. 020234 

a second session key generation unit generating said first session key, 

a second encryption processing unit encrypting said first session key generated at said 
second session key generation unit by said public encryption key extracted at said fourth 
decryption, using said first session key, processing unit, 

a fourth decryption processing unit to decrypt said second session key transmitted from 
said data reproduction unit in an encrypted form with said first session key, and 

a third encryption processing unit carrying out an encryption process with said second 
session key extracted at said fourth decryption processing unit for output, 

wherein said content key stored in said recording unit is encrypted at said third encryption 
processing unit to be supplied to said data reproduction unit. 

45. (Currently Amended) A data reproduction module to be loaded in a 

data reproduction apparatus decrypting encrypted content data to reproduce content data, 

comprising: 

a first key hold unit prestoring a first decryption key unique to said data reproduction 
module, 

a first decryption processing unit using d e crypting for said first decryption key to decrypt 
an encrypted first session key supplied from a source external to said data reproduction module, 
said encrypted first session key is an encrypted version of a first session key using said first 
decryption key, said first session key differing a first s e ssion key supplied from a source external 
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to said data reproduction modulo in an e ncrypt e d form that can bo decrypted with said first 
d e cryption k e y for every access to obtain a content key which is a decryption key directed to 
decrypt said encrypted content data, and extracting said decrypted first session key, 

a session key generation unit generating a second session key updated for every access to 
obtain said content key with respect to a source external to said data reproduction module, 

an encryption processing unit encrypting said second session key using said first session 
key for output to an external source to said data reproduction module, 

a second decryption processing unit using said second session key to decrypt said content 
key encrypted with said second session key and supplied from an external source to said data 
reproduction module, and 

a third decryption processing unit receiving and decrypting said encrypted content data 
supplied from an external source to said data reproduction module, based on an output of said 
second decryption processing unit to extract content data. 

46. (Previously Presented) The data reproduction module according to claim 45, further 
comprising an authentication data hold unit storing a public encryption key unique to said data 
reproduction module and which is an encryption key that can be decrypted with said first 
decryption key and authentication data unique to said data reproduction module in an encrypted 
form that can be decrypted by an authentication key at an external source to said data 
reproduction module, and that can output the stored public encryption key and authentication 
data to an external source to said data reproduction module. 
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47. (Previously Presented) The data reproduction module according to claim 45, wherein 
said content key is input from an external source to said data reproduction module in an 
encrypted form with said second session key, and said second decryption processing unit 
provides a decrypted result to said third decryption processing unit as a content key directed to 
decrypt said encrypted content data. 

48. (Previously Presented) The data reproduction module according to claim 45, wherein 
said content key is input from an external source to said data reproduction module in an 
encrypted form decryptable with said first decryption key, and further encrypted with said second 
session key, 

wherein said first decryption processing unit decrypts using said first decryption key a 
content key in an encrypted form decryptable with said first decryption key which is an output of 
said second decryption processing unit to extract and provide to said third decryption processing 
unit said content key. 

49. (Previously Presented) The data reproduction module according to claim 45, wherein 
said content key is input from an external source to said data reproduction module in an 
encrypted form that can be decrypted with said second decryption key, and encrypted with said 
second session key, 

wherein said data reproduction module further comprises 

a second key hold unit prestoring said second decryption key, and 
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a fourth decryption processing unit using said second decryption key to decrypt said 
content key subjected to encryption that can be decrypted with said second decryption key output 
from said second decryption processing unit to extract and provide to said third decryption 
processing unit said content key. 

50. (Previously Presented) The data reproduction module according to claim 45, wherein 
said content data is coded data coded with a coding scheme to reduce an amount of data, 

said data reproduction module further comprising a decoding unit reproducing data based 
on said coding scheme from said coded data. 

5 1 . (Previously Presented) The data reproduction module according to claim 45, wherein said 
content data is coded audio data coded with a coding scheme to reduce an amount of data, 

said data reproduction module further comprising: 

an audio decoding unit reproducing audio data based on said coding scheme from said 
coded audio data, and 

a digital-analog converter converting said reproduced audio data into analog signals. 

52. (Previously Presented) The data reproduction module according to claim 45, wherein said 
data reproduction module is a tamper resistance module. 
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53. (Currently Amended) A data reproduction apparatus to be loaded with a data recording 
apparatus storing encrypted content data and a content key which is a decryption key directed to 
decrypt said encrypted content data to obtain content data, and encrypting a first session key 
differing for every access to obtain said encrypted content data into a form decryptable with a 
unique decryption key unique to said data reproduction apparatus, said data reproduction 
apparatus reproducing said encrypted content data stored in said data recording apparatus using a 
content key stored in said data recording apparatus, comprising: 

a first interface to attach said data recording apparatus and carry out data transfer with 
said data recording apparatus, 

a key hold unit prestoring a unique key unique to said data reproduction apparatus, 

a first decryption processing unit using said unique decryption key to decrypt an 
encrypted [a] first session key updat e d for e v e ry acc e ss to obtain said cont e nt key and supplied 
from said data recording apparatus in an encrypt e d form that can b e d e crypt e d with said uniqu e 
decryption k e y uniqu e to said data reproduction apparatus, said encrypted first session key is an 
encrypted version of a first session key using a unique decryption key unique to said data 
reproduction apparatus, said first session key differing for every access to obtain said content key 
and extracting said first session key , 

a session key generation unit generating a second session key updated for every access to 
obtain said encrypted content key with respect to said data recording apparatus, 

an encryption processing unit encrypting said second session key using said first session 
key to supply said encrypted session key to said data recording apparatus, 
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a second decryption processing unit using said second session key to decrypt said content 
key encrypted with said second session key and supplied from said data recording apparatus, 

a third decryption processing unit receiving and decrypting said encrypted content data 
read out from said data recording apparatus based on an output of said second decryption 
processing unit to extract content data. 

54. (Previously Presented) The data reproduction apparatus according to claim 53, further 
comprising an authentication data hold unit storing a public encryption key which is an 
encryption key unique to said data reproduction apparatus and decryptable with said first 
decryption key and authentication data unique to said data reproduction apparatus in an encrypted 
form that can be decrypted by an authentication key at said data recording apparatus, and 
providing the stored public encryption key and authentication data to said data recording 
apparatus. 

55. (Previously Presented) The data reproduction apparatus according to claim 53, wherein 
said content key is encrypted with said second session key and supplied from said data recording 
apparatus, and said second decryption processing unit provides a decrypted result to said third 
decryption processing unit as a content key directed to decrypt said encrypted content data. 
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56. (Previously Presented) The data reproduction apparatus according to claim 53, wherein 
said content key is encrypted in a form decryptable with said first decryption key, and encrypted 
with said second session key to be supplied from said data recording apparatus, 

wherein said first decryption processing unit uses said first decryption key to decrypt an 
encrypted content key that can be decrypted with said first decryption key which is an output of 
said second decryption processing unit to extract and provide to said third decryption processing 
unit said content key. 

57. (Previously Presented) The data reproduction apparatus according to claim 53, wherein 
said content key is encrypted in a form decryptable with said second decryption key, and 
encrypted with said second session key to be supplied from said data recording apparatus, 

said data reproduction apparatus further comprising: 
a second key hold unit prestoring said second decryption key, and 
a fourth decryption processing unit using said second decryption key to decrypt said 
content key in an encrypted form decryptable with said second decryption key output from said 
second decryption processing unit to extract and provide to said third decryption processing unit 
said content key. 

58. (Previously Presented) The data reproduction apparatus according to claim 53, wherein 
said content data is coded data encoded by a coding scheme to reduce an amount of data, 
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said data reproduction apparatus further comprising a decoding unit reproducing data 
based on said coding scheme from said coded data. 

59. (Previously Presented) The data reproduction apparatus according to claim 53, wherein 
said content data is coded audio data coded by a coding scheme to reduce an amount of data, 

said data reproduction apparatus comprising: 

an audio decoding unit reproducing audio data based on said coding scheme from said 
coded audio data, and 

a digital-analog converter converting said reproduced audio data into analog signals. 

60. (Previously Presented) The data reproduction apparatus according to claim 53, further 
comprising a second interface connected to a portable telephone network. 

61 . (Previously Presented) The data reproduction apparatus according to claim 60, further 
comprising a conversation processing unit to carry out conversation via said second interface. 

62. (Previously Presented) The data reproduction apparatus according to claim 53, said data 
reproduction apparatus comprising a security region that cannot be read out by a third party, 

wherein at least said first key hold unit, said first decryption processing unit, said second 
decryption processing unit and said third decryption processing unit are provided in said security 
region. 
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63. (Previously Presented) The data reproduction apparatus according to claim 53, said data 
reproduction apparatus including a security region that cannot be read out by a third party, 

wherein at least said first key hold unit, said second key hold unit, said first decryption 
processing unit, said second decryption processing unit, said third decryption processing unit, 
and said second decryption processing unit are provided in said security region. 
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